JumpCloud MDM

Automate cross-platform device management with JumpCloud unified MDM solution

JumpCloud's Mobile Device Management provides unified device management for Windows, macOS, Linux, iOS, and Android devices. Connecting JumpCloud MDM to Harmony enables automated device enrollment, intelligent policy enforcement, and cross-platform fleet management from a single platform.

Harmony collects device data from JumpCloud automatically on a scheduled basis, so your device inventory stays up to date without any manual action. Data is processed through a unified pipeline, normalised into a consistent schema, and made available for visibility, analysis, and workflow automation across your fleet.

What the JumpCloud MDM integration enables

Capability	Description
Cross-Platform Management	Manage Windows, Mac, Linux, iOS, and Android devices
Remote Commands	Execute remote lock, wipe, and restart commands
Compliance Monitoring	Track device compliance and security status
Device Filtering and Sorting	Filter, sort, and search your device inventory with multi-value conditions
Workflow Builder Blocks	Use JumpCloud MDM data directly in automated support workflows
Custom Script Deployment	Create and deploy scripts to macOS, Windows, and Linux devices
Recovery Key Access	View and retrieve MDM recovery keys directly within Harmony
Windows Device Discovery	Inventory Windows devices including USB and Bluetooth peripherals
Automatic OS System Groups	Automatically create JumpCloud OS system groups from asset data

Prerequisites

• JumpCloud Admin Access: Organization administrator role
• JumpCloud Subscription: With MDM features enabled
• Harmony Account: Active Harmony workspace

Configuration

Step 1: Generate API Key in JumpCloud

1. Log in to your JumpCloud Admin Portal
2. Navigate to User Authentication > API Keys
3. Click Generate New API Key
4. Copy the API key (you'll need this for Harmony)

Step 2: Navigate to Integrations

1. Go to Settings > Integrations
2. Under MDM, select JumpCloud (MDM)

JumpCloud MDM Integration

Step 3: Enter API Credentials

1. Enter your Instance name
2. Enter your JumpCloud API key
3. Click Connect

JumpCloud MDM Configuration

What Harmony Syncs

From JumpCloud:

• Device inventory across all platforms
• Device compliance status
• Installed applications
• Policy assignments
• Device health metrics
• Enrollment status
• Last restart time (calculated from System Insights uptime data, covering over 74% of devices with System Insights enabled)
• Battery health status (reported using standardised values)

Device Data and Inventory

Harmony automatically syncs device data from JumpCloud on a scheduled basis. Data collection runs continuously in the background for every connected tenant, so your device inventory stays accurate without any manual triggering.

Windows Device Discovery

Harmony deploys PowerShell-based scripts through JumpCloud to inventory managed Windows machines, bringing Windows support in line with existing macOS coverage. In addition to core device inventory via osquery, Harmony also detects connected peripherals:

• USB devices: Discovered using WMI-based enumeration, with automatic filtering of USB hubs and invalid entries, and device-type mapping for accurate asset classification
• Bluetooth devices: Discovered via registry-based scanning, with standardised output for consistent representation across your fleet

Software Inventory

Harmony surfaces only business-relevant applications in the software inventory for JumpCloud-managed devices:

• Mac apps: Only applications installed under /Applications/ are shown; system apps, utilities, and uninstallers are automatically excluded
• Windows programs: Only software installed in Program Files locations is included; system components and utilities are filtered out

Mac Model Names

Harmony displays clean, readable Mac model names for JumpCloud-managed devices. Instead of cryptic identifiers like Mac16,7, Harmony resolves these to human-readable names such as "MacBook Pro (16-inch, 2024)" using a comprehensive lookup covering all Mac product lines from 2008 through 2025 - including MacBook Pro, MacBook Air (including M1, M2, M3, and M4 models), MacBook, iMac, and more. Where Apple MDM marketing name data is available, a clean short format is used, such as "MacBook Air 15"" or "MacBook Pro 16"".

Automatic OS System Groups

When assets are synced with JumpCloud, Harmony can automatically create OS-based system groups in JumpCloud. This keeps your device groups consistent with your asset data and reduces manual setup in JumpCloud.

Device List Filtering and Sorting

You can filter and sort your managed devices list directly within Harmony's JumpCloud MDM integration. The device list supports:

• Sort devices by name, status, or compliance status in ascending or descending order
• Filter devices using multi-value conditions, so you can narrow results across multiple statuses or attributes at once
• Search across devices with a simplified, unified query interface

These capabilities make it easier to manage large device inventories and quickly identify the devices you need.

MDM Recovery Keys

Harmony fetches and stores recovery keys for your JumpCloud-managed devices automatically. Recovery keys are encrypted at rest and accessible directly within Harmony when you need them for device recovery or ticket resolution.

• Recovery keys are synced per device from JumpCloud and stored encrypted in Harmony
• A dedicated recovery key button and modal on the device view gives you quick access to each device's key
• Keys are available during support and incident resolution workflows

Custom Script Deployment

You can create, manage, and deploy custom scripts to your JumpCloud-managed devices directly through Harmony. Scripts support full lifecycle tracking and can be scoped precisely to the devices that need them.

• Multi-OS targeting: Deploy scripts to macOS, Windows, or Linux devices from a single interface
• Device filtering: Include or exclude specific devices by device type, device ID, or other conditions to scope deployments precisely
• Script management: Create, update, and delete scripts with full lifecycle tracking across your MDM integrations
• JumpCloud integration: Full support for deploying, updating, and removing scripts via JumpCloud

Workflow Builder

JumpCloud has been split into two distinct categories in the workflow builder - Identity Provider (IdP) and MDM - so you can work with each capability independently and more clearly. You can connect to JumpCloud MDM directly within the workflow builder to power automated support workflows with device management data.

The following MDM blocks are available for JumpCloud:

Block	Description
Get Device	Retrieve details for a specific device managed in JumpCloud MDM
List Devices	Query and list devices across your JumpCloud MDM environment, with an option to include extended fields for richer device data

The List Groups (IdP) block is available under the JumpCloud Identity Provider category.

Data Reliability and Multi-Integration Support

Harmony's background data processing is optimised to reduce sync failures and keep your JumpCloud data consistently available. When managing multiple MDM integrations alongside JumpCloud, device and policy data is correctly scoped per integration so that records from one MDM source do not interfere with another. Stale or unsynced data is cleaned up after each sync cycle to keep your device inventory accurate.